Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44fc9e4b-93af-36e3-8413-82044630e0d7.roa
File:                     44fc9e4b-93af-36e3-8413-82044630e0d7.roa (raw, json)
Hash identifier:          L0Qr1aWGwQBXzpEGvZ8+wWNjF2EyelHeLYv492TWWRg=
Subject key identifier:   04:5E:C9:14:0E:11:D6:CD:75:96:20:B0:74:70:41:03:A9:E5:60:33
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E25A700047F282BC16F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44fc9e4b-93af-36e3-8413-82044630e0d7.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     36103
IP address blocks:        65.49.6.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:25:a7:00:04:7f:28:2b:c1:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=41d583e4-df86-4469-a73e-58ce70c9b7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:73:4a:17:b7:d6:39:cc:f9:27:77:2b:c2:b1:
                    f3:fd:c3:06:2d:d0:dd:0a:63:80:5e:98:48:93:18:
                    68:65:fb:d6:bf:43:73:be:bd:48:94:fe:65:1d:ac:
                    38:d1:2e:c6:7f:0f:62:61:5a:3b:99:82:c6:9d:97:
                    8d:e3:bc:5e:86:ed:e9:1c:6c:8c:f1:b2:eb:c5:50:
                    c4:b2:0c:9f:b4:88:0b:8b:50:75:5e:be:42:21:53:
                    56:e9:2d:7a:0c:13:04:e4:62:df:49:04:fb:28:12:
                    3c:d3:d6:66:ea:cd:0f:77:60:75:b4:13:48:f7:a9:
                    7c:39:b6:af:56:f6:49:9e:e1:32:d5:c8:d5:be:b7:
                    88:29:ae:ac:7b:a5:15:f7:8d:36:bb:f1:8f:81:62:
                    02:6d:d4:01:d4:c2:ca:0f:19:b2:c2:8d:22:29:5f:
                    19:d9:d3:bd:4d:d4:35:60:fd:58:3f:33:f3:bb:8c:
                    a0:6b:cd:98:18:1f:7f:58:91:c2:b8:f3:7a:aa:f0:
                    52:31:37:90:80:da:88:4a:7c:8a:c1:cf:df:6e:8c:
                    1a:bd:c7:01:82:f9:7b:14:d3:00:82:ee:33:e2:0a:
                    54:d5:c5:45:02:b3:d9:97:5f:f9:0c:aa:dc:de:7a:
                    98:7d:9c:56:82:8b:56:62:6f:04:b9:a9:80:09:5c:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5E:C9:14:0E:11:D6:CD:75:96:20:B0:74:70:41:03:A9:E5:60:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44fc9e4b-93af-36e3-8413-82044630e0d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:12:a2:0a:ee:97:c4:6b:a6:5a:69:27:81:69:9e:8a:13:f4:
         10:64:cc:23:1d:4e:02:a1:26:fd:d3:35:12:1e:36:71:89:5c:
         4e:c7:d5:73:0e:7f:50:e5:07:91:f9:4d:f3:17:df:6b:f0:7a:
         05:81:7a:01:2c:c7:4b:61:17:b4:06:22:dd:03:6e:eb:63:89:
         42:b4:67:b5:7f:9f:18:e0:ea:61:77:a2:a1:d1:2f:0b:81:52:
         92:9f:f7:a0:ea:92:de:f8:10:5b:60:ea:5f:bb:42:d2:eb:c0:
         f0:8d:b4:80:70:a3:e3:28:9f:fb:53:cf:15:f7:c4:eb:67:74:
         bf:55:f0:cb:e5:43:b7:ff:9c:a8:79:53:99:64:22:a9:4c:9e:
         2f:d6:cb:0c:5d:0a:5c:62:60:d3:ad:a9:6e:48:67:b3:61:37:
         57:99:1b:e3:dd:48:da:59:d2:c2:48:c9:f6:0f:b0:21:51:58:
         d3:17:41:74:c7:32:ce:0c:c7:7d:79:8a:52:f5:29:58:10:9f:
         ef:31:4a:d7:3c:97:df:cb:52:db:a0:b3:48:d3:12:68:2b:79:
         dc:2f:71:cf:dd:12:2c:22:23:cb:b6:96:26:9c:bb:e8:23:c7:
         3b:2b:09:e7:55:73:51:0c:e1:c1:45:9d:b5:93:69:5f:0e:36:
         43:0d:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----